ALBA-2019:3490 ldns bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ldns bug fix and enhancement update

An update is available for ldns. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

PT-2019-6240 · Nlnet +6 · Ldns +6

Name of the Vulnerable Software and Affected Versions: ldns version 1.7.1 Description: The issue is related to a heap out of bounds read in the ldns rr new frm str internal function when verifying a zone file. This allows an attacker to leak information on the heap by constructing a zone file...

EulerOS Virtualization 2.5.0 : ldns (EulerOS-SA-2018-1231)

According to the version of the ldns package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231 Note that Tenable...

Fedora Update for ldns FEDORA-2017-3915878e18

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 26 Update: ldns-1.7.0-4.fc26

ldns is a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets...

Fedora 27 : ldns (2017-ffa8601413)

Fix memory corruption in ldnsstr2rdflongstr, ldnsrrnewfrmfpl 1511046 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

DNS Traffic Capture: DNSCAP

dnscap is a network capture utility designed specifically for DNS traffic. It produces binary data in pcap3 and other format. This utility is similar to tcpdump1, but has a number of features tailored to DNS transactions and protocol options. DNS-OARC uses dnscap for DITL data collections. Some o...

MGASA-2018-0003 Updated ldns packages fix security vulnerabilities

Stephan Zeisberg discovered that ldns incorrectly handled memory when processing data. A remote attacker could use this issue to cause ldns to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2017-1000231, CVE-2017-1000232...

Updated ldns packages fix security vulnerabilities

Stephan Zeisberg discovered that ldns incorrectly handled memory when processing data. A remote attacker could use this issue to cause ldns to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2017-1000231, CVE-2017-1000232...

EulerOS 2.0 SP1 : ldns (EulerOS-SA-2017-1336)

According to the version of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231 Note that Tenable Network Security ha...

EulerOS 2.0 SP2 : ldns (EulerOS-SA-2017-1337)

According to the version of the ldns package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.CVE-2017-1000231 Note that Tenable Network Security ha...

Ubuntu 14.04 LTS / 16.04 LTS : ldns vulnerabilities (USN-3491-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3491-1 advisory. Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue t...

CVE-2017-1000231

A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors...

CVE-2017-1000232

A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors...

Fedora Update for ldns FEDORA-2017-ffa8601413

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3491-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3491-1 ldns vulnerabilities

Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. CVE-2014-3209 Stephan Zeisberg discovered that ldns incorrectly handled memory...

USN-3491-1: ldns vulnerabilities

Leon Weber discovered that the ldns-keygen tool incorrectly set permissions on private keys. A local attacker could possibly use this issue to obtain generated private keys. This issue only applied to Ubuntu 14.04 LTS. CVE-2014-3209 Stephan Zeisberg discovered that ldns incorrectly handled memory...

[SECURITY] Fedora 27 Update: ldns-1.7.0-9.fc27

ldns is a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets...